Skip to content

Commit d36d7a6

Browse files
committed
.github/workflows/release-npm-package: update for npm.js via OIDC
1 parent 9a132a3 commit d36d7a6

File tree

1 file changed

+5
-7
lines changed

1 file changed

+5
-7
lines changed

.github/workflows/release-npm-package.yaml

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -5,19 +5,19 @@ on:
55
workflow_call:
66
workflow_dispatch:
77

8+
permissions:
9+
id-token: write # Required for OIDC
10+
contents: read
11+
812
jobs:
913
build-npm-package:
1014
runs-on: ubuntu-latest
11-
permissions:
12-
contents: read
13-
packages: write
1415
steps:
1516
- uses: actions/checkout@v5
1617
- uses: actions/setup-node@v4
1718
with:
1819
node-version: "latest"
19-
registry-url: "https://npm.pkg.github.com"
20-
scope: "@octocat"
20+
registry-url: "https://registry.npmjs.org"
2121
- name: Install Nix
2222
uses: cachix/install-nix-action@v31
2323
- name: Build npm package
@@ -30,5 +30,3 @@ jobs:
3030
- name: Publish npm package
3131
run: npm publish
3232
working-directory: ./build
33-
env:
34-
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)